Senior Information Technology Security Officer

About the role

The IT Security Officer (ITSO) plays a senior, hands-on role within the IT Information Security function of a national digital platform. Beyond day-to-day security operations, the role shapes and embeds the cybersecurity posture, drives security architecture, influences product and engineering decisions and raises cybersecurity practice across the platform and its delivery partners.

Key responsibilities

• Lead security architecture reviews, threat modelling and design risk assessments, and embed security requirements early in the SDLC with product owners, engineers and vendors
• Own end-to-end cyber and data incident response, including detection, containment, root cause analysis and preventive controls, and improve SOC monitoring, SIEM use cases and playbooks
• Implement and optimise cloud security controls on AWS and Azure, and embed DevSecOps (SAST, DAST, dependency and container scanning) in GitLab CI/CD pipelines
• Ensure compliance with IM8, PDPA, ISO 27001 and government cybersecurity requirements, lead audits and maintain security policies and standards
• Advise product teams, management and vendors, mentor junior security staff and guide vendors to meet security requirements

Required profile

• Bachelor's degree in Computer Science, Information Security or a related discipline
• At least 5 years of hands-on cybersecurity experience owning complex security initiatives
• Ability to work in ambiguously scoped environments, communicate with stakeholders and influence without authority
• Preferred: industry certifications such as CISSP, CISM, CISA, CCSP, CEH or GIAC, and experience in government, critical systems or highly regulated environments

Required skills

• Endpoint and threat detection (EDR/XDR, threat hunting)
• Application, infrastructure and data protection (WAF, ASM, DLP)
• Cloud security (AWS and Azure native services)
• SIEM, vulnerability management and VAPT
• Identity and access management (IAM, privileged access)
• DevSecOps integration